This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa File: 38332e3133362e3231382e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: hgFpBQa/wtZFk/UiMNcWgINgTTILE2zMt0LA83nhqv8= Subject key identifier: BA:A1:98:E3:22:D6:9B:75:D0:5F:0C:A2:94:50:46:5B:2B:0C:D1:CB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 16D5846276234D7837CF806C836A574A5D5A882F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:03 +0000 ROA not before: Fri 21 Nov 2025 15:44:03 +0000 ROA not after: Fri 20 Nov 2026 15:49:03 +0000 asID: 47583 IP address blocks: 83.136.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d5:84:62:76:23:4d:78:37:cf:80:6c:83:6a:57:4a:5d:5a:88:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:03 2025 GMT Not After : Nov 20 15:49:03 2026 GMT Subject: CN=BAA198E322D69B75D05F0CA29450465B2B0CD1CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:32:7b:cc:9a:2b:0a:c3:a0:5f:17:20:ee: b1:25:1b:93:28:0d:b7:1f:ab:e3:0a:0c:4e:93:dc: 86:01:3c:dd:bb:44:e4:1a:2d:a1:06:62:8f:f0:f4: d6:50:45:f6:03:6d:ca:4d:3f:b1:34:30:3f:af:bc: 44:4e:9f:62:29:48:8c:99:24:81:22:98:ec:1e:1a: b2:ec:3c:22:b4:53:88:9e:ce:1d:0c:ba:5b:f6:e9: 7a:16:3e:7f:d3:59:c7:47:89:93:27:94:36:b8:3c: 4b:fe:75:bb:5a:d8:2c:a2:91:6d:93:23:a1:b9:7b: 45:c0:7c:28:3c:bc:b0:58:bd:b1:44:f0:0a:e1:3e: cc:31:c3:ff:17:7e:3f:97:ed:31:2c:9b:60:df:d8: 0f:70:78:6e:6f:c8:ca:b8:2b:6f:10:69:8c:0a:0b: 0a:c7:ec:3e:4c:09:9f:20:dd:d6:0d:db:1f:3d:3c: a9:84:f5:ce:64:fa:6f:72:0b:08:89:87:93:6b:c0: 47:3f:15:60:4f:7d:36:f0:5b:f1:2b:47:e9:ef:26: 32:ee:8d:cc:e0:1f:7f:c8:fc:86:e1:3d:1f:c9:f3: 84:0b:66:b7:f8:63:2e:a4:1c:cf:86:41:4b:6f:74: 6b:6a:32:6f:4c:d7:c5:b1:3b:6c:2c:aa:90:39:05: 59:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A1:98:E3:22:D6:9B:75:D0:5F:0C:A2:94:50:46:5B:2B:0C:D1:CB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.218.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:af:e3:c9:a2:eb:13:b6:f5:e9:e8:31:24:10:97:29:d5:52: 25:a4:c0:a5:99:b2:de:7c:41:31:47:ef:20:f6:a1:f4:eb:18: 5a:1d:06:89:30:dc:60:85:45:15:0f:83:6d:d3:41:2f:ba:44: 4d:b9:66:0f:43:5b:2c:fa:99:cc:9c:12:c6:f5:66:1d:4b:c2: 36:30:05:60:6b:c5:ac:ef:f6:68:cb:d7:bf:3b:61:73:92:1d: 5e:54:39:c3:36:78:68:6e:8c:e0:b2:4f:fb:8b:74:d9:31:2e: 4b:af:84:a6:4e:a3:ec:ba:cb:d8:3d:e1:c9:db:81:1c:25:52: 59:4b:19:e3:39:99:9f:22:76:93:8b:d4:24:4f:71:62:29:94: a0:33:ef:14:29:9e:08:fb:c4:68:24:36:26:40:f5:76:21:89: 55:5b:28:28:ec:29:4e:8c:89:8d:ce:f7:0e:34:ce:1d:2d:a8: 82:ea:de:74:5d:54:83:aa:1d:97:04:35:eb:35:3a:d4:93:8f: 0c:8e:20:cc:ba:a7:8e:b0:1a:e3:91:d0:36:3a:72:4d:88:ee: 25:9a:8f:60:8f:7f:6d:51:59:56:c1:b3:d9:77:db:a0:3a:d6: 88:bb:32:1b:7e:eb:c9:61:0a:60:4e:34:ac:6f:35:ea:54:a7: 9f:d8:20:e4 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUFtWEYnYjTXg3z4Bsg2pXSl1aiC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDNaFw0yNjExMjAxNTQ5MDNaMDMxMTAvBgNV BAMTKEJBQTE5OEUzMjJENjlCNzVEMDVGMENBMjk0NTA0NjVCMkIwQ0QxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+jJ7zJorCsOgXxcg7rElG5Mo Dbcfq+MKDE6T3IYBPN27ROQaLaEGYo/w9NZQRfYDbcpNP7E0MD+vvEROn2IpSIyZ JIEimOweGrLsPCK0U4iezh0Mulv26XoWPn/TWcdHiZMnlDa4PEv+dbta2CyikW2T I6G5e0XAfCg8vLBYvbFE8ArhPswxw/8Xfj+X7TEsm2Df2A9weG5vyMq4K28QaYwK CwrH7D5MCZ8g3dYN2x89PKmE9c5k+m9yCwiJh5NrwEc/FWBPfTbwW/ErR+nvJjLu jczgH3/I/IbhPR/J84QLZrf4Yy6kHM+GQUtvdGtqMm9M18WxO2wsqpA5BVlzAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUuqGY4yLWm3XQXwyilFBGWysM0cswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzMTMzMzYy ZTMyMzEzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFTiNowDQYJKoZIhvcNAQELBQADggEBAI2v48mi6xO29enoMSQQlynVUiWk wKWZst58QTFH7yD2ofTrGFodBokw3GCFRRUPg23TQS+6RE25Zg9DWyz6mcycEsb1 Zh1LwjYwBWBrxazv9mjL1787YXOSHV5UOcM2eGhujOCyT/uLdNkxLkuvhKZOo+y6 y9g94cnbgRwlUllLGeM5mZ8idpOL1CRPcWIplKAz7xQpngj7xGgkNiZA9XYhiVVb KCjsKU6MiY3O9w40zh0tqILq3nRdVIOqHZcENes1OtSTjwyOIMy6p46wGuOR0DY6 ck2I7iWaj2CPf21RWVbBs9l326A61oi7Mht+68lhCmBONKxvNepUp5/YIOQ= -----END CERTIFICATE-----Generated at Fri Dec 5 18:55:03 2025 by rpki-client